Come work at a place where innovation and teamwork come together to support the most exciting missions in the world
We are seeking Senior GRC Engineer to design, scale, and automate security governance, risk, and compliance frameworks. In this role, you will bridge the gap between compliance requirements and technical execution by automation for frameworks like NIST and ISO standards, building standardized control libraries, mapping multi-standard frameworks, and driving audit readiness.
If you have a solid foundation in risk management frameworks (NIST, ISO 27001/2) and an engineering-minded approach to control implementation and evidence automation, you will thrive in this position.
Key Responsibilities:
1. Framework Architecture & Control Management
Design Control Libraries: Build and maintain scalable, reusable security and compliance control libraries across the organization.
Framework Mapping: Translate complex regulatory and industry standards into standardized, actionable control definitions.
Risk & Policy Alignment:



Map evidence requirements across overlapping compliance frameworks to eliminate redundancy and support the ISO & NIST Risk Management Frameworks.
2. Compliance Automation & Evidence Engineering
Evidence Modeling: Define standardized evidence artifacts, validation logic, and assessment criteria for automated control evaluation.
Engineering Collaboration: Partner with engineering and security teams to build automated evidence collection pipelines and continuous compliance monitoring.
Data-Driven GRC: Build compliance content and metadata rule libraries using structured data formats (JSON/YAML) to scale platform capabilities.
3. Audit Readiness & Framework Implementation
NIST & ISO Implementation: Drive the practical design, implementation, and mapping of NIST (CSF / SP 800-53 / RMF / SOC 2) and ISO 27001/27002 control frameworks across technical environments.
Assessment Guidance: Define clear implementation guidance, control validation criteria,

📌 Senior GRC Engineer (Pune)
🏢 Qualys
📍 Pune